buildroot/package/rsync, branch 2018.02

rsync: security bump to version 3.1.3

2018-02-10T09:13:03+00:00

Fixes CVE-2018-5764: remote attackers can bypass an argument-sanitization protection mechanism Drop upstream patches. Add license file hash. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

rsync: add upstream security fix for CVE-2017-16548

2017-12-19T20:50:52+00:00

The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon. For more details, see: https://bugzilla.samba.org/show_bug.cgi?id=13112 Signed-off-by: Peter Korsgaard

rsync: add security fix patches

2017-12-07T21:23:45+00:00

Fixes CVE-2017-17433 and CVE-2017-17434: remote bypass of security restrictions. Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

boot, package: use SPDX short identifier for GPLv3/GPLv3+

2017-04-01T13:17:59+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for GPLv3/GPLv3+ is GPL-3.0/GPL-3.0+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\/GPL-3.0/g' Signed-off-by: Rahul Bedarkar Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

rsync: security bump to version 3.1.2

2015-12-22T15:35:15+00:00

Fixes: Make sure that all transferred files use only path names from inside the transfer. This makes it impossible for a malicious sender to try to make the receiver use an unsafe destination path for a transferred file, such as a just-sent symlink. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

packages: indentation cleanup

2015-03-31T11:57:41+00:00

This commit doesn't touch infra packages. Signed-off-by: Jerzy Grzegorek Signed-off-by: Thomas Petazzoni

rsync: add hash file

2014-10-19T15:35:26+00:00

Signed-off-by: Gustavo Zacarias Acked-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

infra: Move --enable/--disable-debug to package/Makefile.in

2014-10-19T15:07:14+00:00

A lot of packages ignored BR2_ENABLE_DEBUG. This patch simplifies the handling of this option by adding the corresponding configure option to the global Makefile for target packages. For host packages --disable-debug is added to the global Makefile. Signed-off-by: Bernd Kuhls Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

packages: rename FOO_CONF_OPT into FOO_CONF_OPTS

2014-10-04T16:54:16+00:00

To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

rsync: bump to version 3.1.1

2014-07-10T09:29:12+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard